Priority MEDIUM 50
Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network.
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.00831 · Published 2026-08-11 · No fix listed CWE-306
Priority MEDIUM 51
Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00901 · Published 2026-07-24 · No fix listed CWE-306
Priority MEDIUM 40
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Azure Kubernetes Service allows an authorized attacker to execute code locally.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00336 · Published 2026-06-09 · Fixed in v0.20260213.5 CWE-22
Priority MEDIUM 50
Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00733 · Published 2026-04-02 · No fix listed CWE-285
Priority MEDIUM 44
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.01338 · Published 2024-02-13 · Fixed in 0.3.3 CWE-552
Priority MEDIUM 43
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.01172 · Published 2024-02-13 · Fixed in 0.3.3 CWE-284
Priority CRITICAL 90KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.99999 · Published 2023-10-10 · Partial fix · 1.28.0, 0.17.0 +9 CWE-400
Priority MEDIUM 53
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02676 · Published 2023-09-12 · Fixed in VHD 202308 CWE-330
Priority LOW 33
Azure Virtual Machine Information Disclosure Vulnerability
CVSS 3.1MEDIUM 6.8· Adjacent network · Low privileges · No interaction · EPSS 0.01367 · Published 2021-03-11 · Fixed in publication
Priority LOW 34
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVSS 3.1MEDIUM 6.8· Network · High privileges · User interaction · EPSS 0.02174 · Published 2021-02-25 · No fix listed
Priority LOW 27
Azure Active Directory Pod Identity Spoofing Vulnerability
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.01152 · Published 2021-01-12 · Fixed in publication CWE-290
THREATIST.IORead the docs